Overview

overview

10

Static

static

10

199444f974...18.apk

android-9-x86

BannerPlugin-3.0.apk

android-9-x86

BannerPlugin-3.0.apk

android-10-x64

BannerPlugin-3.0.apk

android-11-x64

CommonPlugin-4.6.apk

android-9-x86

CommonPlugin-4.6.apk

android-10-x64

CommonPlugin-4.6.apk

android-11-x64

FrameworkP....4.apk

android-9-x86

FrameworkP....4.apk

android-10-x64

FrameworkP....4.apk

android-11-x64

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    199444f974ff19462fe088c6fe03016b_JaffaCakes118

  • Size

    10.8MB

  • MD5

    199444f974ff19462fe088c6fe03016b

  • SHA1

    d3ab8cf2dcd45b2da92d3ca362a7362392c220d8

  • SHA256

    840ff0835cc8a21ab4c073efb12464d517319da677848f8c97931d7b33d35a06

  • SHA512

    7c844cbfa59ce9fbb5e5860df62a134b206e9f2586f5a4ce110faa55e29349207a6c5bd961fa5fd977c5f250c1191cbd2bde5875e87fc2abaee240369c5164fc

  • SSDEEP

    196608:lh5X6drUto9VFsJlDSEe+Tp9+0WGP+bn4lset2y0GY08Do7S06p371gcTEtalipr:rlIUiKJtheApY0WGP+b4bvCDou0Qhgco

Score
10/10
joker

Malware Config

Extracted

Family

joker

C2

http://appx.91.com/api.ashx

http://config.inmobi.com/config-server/v1/config/secure.cfg

http://i.w.inmobi.com/showad.asm

Signatures

  • Joker family
    joker
  • Requests dangerous framework permissions 7 IoCs

Files

  • 199444f974ff19462fe088c6fe03016b_JaffaCakes118
    .apk android arch:arm

    com.lemon.play.freecell

    org.cocos2dx.cpp.AppActivity


  • BannerPlugin-3.0.apk
    .apk android

    com.alimama.mobile.sdk.banner

    com.alimama.mobile.plugin.banner.service.MainActivity


  • CommonPlugin-4.6.apk
    .apk android

    com.taobao.munion.plugin.cm

    com.taobao.test.MainActivity


  • FrameworkPlugin-3.4.apk
    .apk android

    com.taobao.munion.plugin.framework


  • __xadsdk__remote__final__.jar
    .apk android

Android Permissions

199444f974ff19462fe088c6fe03016b_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_CONFIGURATION

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.INTERNET